Absolutely! WMI is a good way to do this. The WMIWatcher script does this for you. You can download the the script from http://users.skynet.be/alain.lissoir/temp/WMIWatcher.zip
You can find other script samples doing this at http://www.lissware.net (Volume 1 samples): Sample 6.13 - SynchronousEventConsumer.wsf to Sample 6.17 - GenericEventAsyncConsumer.wsf show the basic mechanic to catch events from WMI. and Sample 6.22 to 6.23 - EventLogTimeDiffMonitor.wsf to Sample 6.25 to 6.27 - EventLogTimeDiffMonitorWithNonEvent.wsf show how to catch events from the NT event log and calculate the time between two events (or no event after a timeout). It also sends an email alert. However, you don't necessarily have to run a script to do this. You can also leverage the SMTP Permanent Event Consumer Provider. It requires a MOF file compilation. You can find a sample at http://www.lissware.net (Volume 1 samples): Sample 2.03 - SMTPConsumerInstanceReg.mof For non-WMI people, this will be a bit more complex to setup, however. It described in my WMI books but MSDN has also some information about it at http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wmisdk/wmi/ smtpeventconsumer.asp This WMI provider consumes any WMI events and send an SMTP email to a relay of your choice. The WQL query you submit makes the WMI event selection. HTH /Alain -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Friday, March 18, 2005 12:15 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Event Log Just to be specific, event viewer is a simple client tool used to view entries in the event log. It is like notepad reading a file. If you need to get alerts like that, you will need to use a third party tool or script. WMI tends to be good in this space, take a look at some of the WMI web sites or books. joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of rubix cube Sent: Monday, March 14, 2005 5:08 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Event Log Please is there any way to make the event viewer trigger an email? Thanks r.c. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
